Tech Lead - Penetration Testing, Red Team, Cloud, and ICS/OT

We are seeking an experienced Tech Lead to manage the Domain Experts covering penetration testing, red teaming, cloud security, and ICS/OT (SCADA) security. This role is dedicated to the quality of intent analysis for cybersecurity prompts that an AI system could not confidently classify as benign or malicious, across the domains of the team.

You need to be a hands-on expert in your own field, with enough working knowledge of penetration testing, red teaming, and cloud security to judge prompts and guidelines that cross into the other team's domains. You also need to be independent, organized, and able to lead technical experts.

What you'll do:

• Lead and manage the Domain Experts of the team (Enterprise Red Teaming, Web Application Security, Cloud Redteaming, ICS/OT (SCADA): priorities, workload, and performance
• Route incoming rows to the team's domains and rebalance freelancer capacity inside the team as row volume shifts
• Track team quality (agreement and disagreement rates, QA findings) and throughput, and report to the Group Manager
• Resolve escalated edge cases and prompts that span several domains, and work with the other Tech Lead when a prompt crosses into their field
• Keep the annotation guidelines consistent across the team's domains and propose updates
• Annotate or review directly when needed to unblock the team

Requirements

• Minimum of 7 years of proven, hands-on experience in penetration testing, red teaming, cloud security, or ICS/OT (SCADA) security, with deep expertise in at least one of them to assess and coach the Domain Experts
• Solid working knowledge of the other team's fields: penetration testing, red teaming, and cloud security, including common attack paths, tooling, and how their techniques appear in real intrusions
• At least 2 years of experience leading or mentoring technical specialists (team lead, tech lead, or senior reviewer)
• Experience with quality processes such as QA sampling, calibration sessions, and quality metrics
• Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
• Clear written and verbal communication in English

Nice to have:

• OSEP, GCPN, GIAC GICSP
• Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.

About Alice

Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines.

In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.